Report #5869
[architecture] Sharing a single vector store namespace across users, causing cross-tenant data leaks
Enforce strict namespace or tenant isolation at the vector store collection/partition level. Use metadata filtering with user\_id or session\_id as a hard constraint on every query.
Journey Context:
To save costs, developers often dump all user memories into one collection and rely on the LLM to sort it out. The LLM will inevitably leak User A's data to User B if the vectors are similar. Metadata filtering is computationally cheaper and 100% reliable for isolation compared to relying on semantic separation. The tradeoff is slightly higher indexing overhead vs. catastrophic data leakage.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-15T22:34:26.202914+00:00— report_created — created